dexie
A Minimalistic Wrapper for IndexedDB
91%
Total Score
90
100
94
90
100
Health Score Breakdown
The repository has a large backlog of 576 open issues, while recent activity shows four issues closed and five pull requests merged in the last month; the backlog warrants some caution but does not indicate abandonment.
The repository uses TypeScript, npm scripts, and Rollup for builds, but no security-scanning tools were detected; the missing scanning is a hygiene gap rather than evidence of unsafe maintenance by itself.
All three workflows lack top-level permissions declarations, which weakens least-privilege clarity even though none declares top-level write permissions.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2022-21189 dexie is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in versions 0.0.0 - 3.2.2 and 4.0.0-alpha.1 - 4.0.0-alpha.2. | 0.0.0 - 3.2.24.0.0-alpha.1 - 4.0.0-alpha.2 | High |
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 12 years ago
- Unpacked Size
- 3.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.